Change Date/Time settings on domain-joined PCs

DP230
DP230 used Ask the Experts™
on
Dear Wizards, our users need to modify the Date/Time settings on domain-joined PCs. Can we do that? please suggest.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
NoahHardware Tester and Debugger

Commented:
Hi there! :)

Please refer to the following article and see if the steps apply for you. The main point is, I will try to advise you on how to do this from the the Local Server section of the Server Manager. If you get stuck or lost at any step, do tell me! I can refer the instructions too so that we will be on the same page.

Reference: https://www.dtonias.com/set-time-date-timezone-settings-server-2016/

windows-server-2016-time-date-timezo.png
DP230Network Administrator

Author

Commented:
Hi, thank you but users'd like to set the different time with server's (in details, they'd like to set time in the past). They have to do that because of some accounting work.
Top Expert 2014

Commented:
You can, but it will mess up any Kerberos authentication involving that machine.  Also, unless you modify the W32Time config it will sync back to the domain within some time.
11/26 Forrester Webinar: Savings for Enterprise

How can your organization benefit from savings just by replacing your legacy backup solutions with Acronis' #CyberProtection? Join Forrester's Joe Branca and Ryan Davis from Acronis live as they explain how you can too.

DP230Network Administrator

Author

Commented:
Hi footech, can the domain users do that without admin right in their domain-joined PCs?
Top Expert 2014

Commented:
A couple ways I've tried all require admin privileges.  So I doubt there's a way that doesn't.
Tom CieslikIT Engineer
Distinguished Expert 2017

Commented:
I think you can ask them to change time zone on members of domain.
This would be easiest way to change time without messing up with kerberos.
Lee W, MVPTechnology and Business Process Advisor
Most Valuable Expert 2013

Commented:
Kerberos authentication requires the time to be "close" - otherwise, users may not be able to access network shares, log in to their computers, get email, and other potential issues.

Not sure what accounting program doesn't allow you to date your entries - unless the entries are ones that flatly shouldn't be changed (not an accountant so I don't know if such entries exist, but it sounds sketchy to me). You're asking for trouble playing with the date and time on the domain.  Especially if you're talking about setting it more than a few minutes one way or another.  Time Zone modification gets you, at best 24 hours.
DP230Network Administrator

Author

Commented:
Changing the time zone is not enough for them, they have to change the time back to few weeks on the past
Lee W, MVPTechnology and Business Process Advisor
Most Valuable Expert 2013

Commented:
Not sure you're going to get a good solution.  Kerberos has worked this way for more than 20 years.  Tens of thousands of companies operate normally without mucking with the date on their computers... not sure why this is necessary for you/your accounting software but it's not something typically done.  Perhaps you should look at updating the accounting software.
Jackie Man IT Manager
Top Expert 2010

Commented:
Changing the time zone is not enough for them, they have to change the time back to few weeks on the past

You need to dis-joint such computers from the domain network.
Senior Consultant
Awarded 2017
Distinguished Expert 2018
Commented:
Give them RunAsDate for whatever they are trying to do
https://www.nirsoft.net/utils/run_as_date.html

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial